← 返回 Skills 市场
Find Night Shopping — Night Markets, Evening Bazaars, Late-Night Stalls & Street Vendors
作者
dingtom336-gif
· GitHub ↗
· v3.2.0
· MIT-0
65
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install night-shopping
功能描述
Find night markets, food streets, and local culinary hotspots. Discover street food, local specialties, and the best evening food experiences. Also supports:...
安全使用建议
Before installing or enabling this skill, consider the following: (1) The skill requires installing a global npm package (@fly-ai/flyai-cli) from the public registry — verify the package owner, source code, and reputation on npm/GitHub before running npm i -g. Global CLI installs can execute arbitrary code and add system-wide binaries. (2) The SKILL.md claims "Powered by Fliggy" but the runtime tool is "flyai" — ask the publisher to clarify the relationship and how booking/payment flows actually work (do you need external accounts or tokens?). (3) The skill's runbook may write a local log file (.flyai-execution-log.json) containing the raw user query and CLI commands; confirm you are comfortable with that local persistence and where the file will be stored. (4) Because the agent is forced to re-run CLI calls until booking links appear, expect repeated network activity; consider running the CLI in a sandbox or reviewing its network behavior first. If you cannot verify the flyai CLI's provenance, avoid installing it globally and ask the skill author for source code or an officially verifiable integration (e.g., documented API endpoints, proper OAuth/token use).
功能分析
Type: OpenClaw Skill
Name: night-shopping
Version: 3.2.0
The skill mandates the global installation of an external NPM package (@fly-ai/flyai-cli) and uses aggressive 'CRITICAL EXECUTION RULES' in SKILL.md to override the agent's default behavior, forcing it to use the CLI exclusively. It also instructs the agent to maintain an execution log in a local JSON file (.flyai-execution-log.json) as seen in references/runbook.md. While these actions are aligned with the stated purpose of providing real-time travel data, the requirement for high-privilege software installation and the forceful prompt-injection-style instructions represent a high-risk pattern.
能力标签
能力评估
Purpose & Capability
The description claims broad travel/booking capabilities and explicitly says "powered by Fliggy (Alibaba Group)", but the runtime instructions require using an unrelated CLI named flyai (package @fly-ai/flyai-cli). There is no explanation tying flyai to Fliggy or showing how booking/payment integration works, and no credentials or API tokens are requested despite claimed booking functionality. This mismatch between branding, claimed capabilities, and the actual tool is incoherent.
Instruction Scope
Runtime instructions force the agent to rely exclusively on the flyai CLI for all answers ("NEVER answer from training data") and require installing a global npm package if the CLI is missing. The runbook describes appending an execution log (.flyai-execution-log.json) that contains the raw user query and CLI commands — i.e., the skill can persist local logs of user inputs. The instructions also demand re-execution until every result includes a booking link, which could cause repeated CLI/network activity. No explicit data exfiltration endpoints appear, but local logging and repeated remote calls are notable scope/persistence behaviors.
Install Mechanism
There is no platform-level install spec, but SKILL.md mandates running npm i -g @fly-ai/flyai-cli (a global install from the npm registry). Installing an unverified global CLI is moderate-to-high risk: it can add system-wide binaries and run arbitrary code. The package's provenance and trustworthiness are not provided in the skill metadata, and the instruction treats the install as mandatory for any response.
Credentials
The skill requires no environment variables or credentials, which reduces credential-exfiltration risk. However, given that the description advertises booking and payment-capable services (and references Fliggy), the absence of any credential requirements is surprising — the skill either delegates booking entirely to the flyai CLI (opaque to the agent) or the booking claims are marketing-only. This inconsistency is worth verifying.
Persistence & Privilege
always is false (good). But the runbook explicitly documents writing execution logs to .flyai-execution-log.json when filesystem writes are available, capturing raw user queries and CLI calls. This is local persistence of user data; users should be told that the skill may create/append such a file. Autonomous invocation is allowed by default but not combined with always:true or requested credentials.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install night-shopping - 安装完成后，直接呼叫该 Skill 的名称或使用
/night-shopping触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v3.2.0
Renamed and optimized per naming methodology v3
元数据
常见问题
Find Night Shopping — Night Markets, Evening Bazaars, Late-Night Stalls & Street Vendors 是什么？
Find night markets, food streets, and local culinary hotspots. Discover street food, local specialties, and the best evening food experiences. Also supports:... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 65 次。
如何安装 Find Night Shopping — Night Markets, Evening Bazaars, Late-Night Stalls & Street Vendors？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install night-shopping」即可一键安装，无需额外配置。
Find Night Shopping — Night Markets, Evening Bazaars, Late-Night Stalls & Street Vendors 是免费的吗？
是的，Find Night Shopping — Night Markets, Evening Bazaars, Late-Night Stalls & Street Vendors 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Find Night Shopping — Night Markets, Evening Bazaars, Late-Night Stalls & Street Vendors 支持哪些平台？
Find Night Shopping — Night Markets, Evening Bazaars, Late-Night Stalls & Street Vendors 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Find Night Shopping — Night Markets, Evening Bazaars, Late-Night Stalls & Street Vendors？
由 dingtom336-gif（@dingtom336-gif）开发并维护，当前版本 v3.2.0。
推荐 Skills